CVE-2025-13810 jsnjfz WebStack-Guns KaptchaController.java renderPicture path traversal

A vulnerability was found in jsnjfz WebStack-Guns 1.0. This affects the function renderPicture of the file src/main/java/com/jsnjfz/manage/modular/system/controller/KaptchaController.java. Performing a manipulation results in path traversal. It is possible to initiate the attack remotely. The...

PT-2025-48415

A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing manipulation of the argument sort can lead to sql injection. It is possible to launch the attack...

EUVD-2025-17559

Malicious code in bioql PyPI...

EUVD-2025-17565

Malicious code in bioql PyPI...

CVE-2025-5888 jsnjfz WebStack-Guns cross-site request forgery

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may b...

CVE-2025-5887 jsnjfz WebStack-Guns File Upload UserMgrController.java cross site scripting

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been classified as problematic. Affected is an unknown function of the file UserMgrController.java of the component File Upload. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack...

PT-2025-24546 · Jsnjfz · Webstack-Guns

Name of the Vulnerable Software and Affected Versions: jsnjfz WebStack-Guns version 1.0 Description: A vulnerability was found in the jsnjfz WebStack-Guns software. It has been classified as problematic and affects an unknown function of the file UserMgrController.java of the component File Uploa...

PT-2025-24549

Name of the Vulnerable Software and Affected Versions jsnjfz WebStack-Guns version 1.0 Description A vulnerability was found in the software, affecting an unknown functionality, which leads to cross-site request forgery. The attack can be launched remotely. The vendor was contacted about this...